General
- Target 2026-07-05_10dbc7dadccf5fe360a3daf2bbc7091b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- Sample260705-cb3pbsgv5w
- SHA256 b7d81598cbd75c30ff73f6c49de0b9855c5c2d27bafef7c8538b223b95bc47c6
- MD5 10dbc7dadccf5fe360a3daf2bbc7091b
- SHA1 22ad09e4c6ec3ffa278aa44504093f0e988c14dc
- SHA512 f6609b8dcac0d9998a0b6c7e750286e8d28a49abd46f734d5c4d29827990fc2fabd349efb913313ab31989699662614794ef8baedf2b92e5989fc66ea270b40a
- SSDEEP 24576:3u6r7oBSO9T7KICgpB5GBrMVyJWrwgh5AQorrYWbJ6HPt6B:33uSQT+ATGBrMGWr7nTC8HPS
- TLSH T106F40222B180D472E52B647585B4CDB14E79BD7A29B0804F77A83EBD0E733D0426D7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_10dbc7dadccf5fe360a3daf2bbc7091b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_10dbc7dadccf5fe360a3daf2bbc7091b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_10dbc7dadccf5fe360a3daf2bbc7091b_elex_redline-stealer_rhadamanthys_smoke-loader_stealc_tofsee
- Size 770KB
- SHA256 b7d81598cbd75c30ff73f6c49de0b9855c5c2d27bafef7c8538b223b95bc47c6
- MD5 10dbc7dadccf5fe360a3daf2bbc7091b
- SHA1 22ad09e4c6ec3ffa278aa44504093f0e988c14dc
- SHA512 f6609b8dcac0d9998a0b6c7e750286e8d28a49abd46f734d5c4d29827990fc2fabd349efb913313ab31989699662614794ef8baedf2b92e5989fc66ea270b40a
- SSDEEP 24576:3u6r7oBSO9T7KICgpB5GBrMVyJWrwgh5AQorrYWbJ6HPt6B:33uSQT+ATGBrMGWr7nTC8HPS
- TLSH T106F40222B180D472E52B647585B4CDB14E79BD7A29B0804F77A83EBD0E733D0426D7AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1